6. How do we protect personal information? 

We follow generally accepted industry standards to protect the 
information submitted to us. We maintain appropriate physical, 
technical and administrative safeguards to protect personal 
information against accidental or unlawful destruction, accidenta 
loss, unauthorized alteration, unauthorized disclosure or access, 
misuse, and any other unlawful form of processing of the 
personal information in our possession. However, no method of 
transmission over the Internet, or method of electronic storage, 1S 
100% secure. Even though we take all reasonable measures to 
protect your information, we cannot ensure or warrant that such 
information may not be accessed, disclosed, altered, or destroyed 
by breach of any of our physical, technical, or administrative 
safeguards. | 


7. What rights do you have in relation to your personal 
information? ; 
Under certain circumstances and in accordance with applicable 
data protection legislation, you are entitled to ask if we are 
processing information and, if we are, request access to personal 
information. You are also entitled to request that any incomplete or 
inaccurate personal information we hold be corrected. To exercise — 
any of these applicable rights, please contact us as set forth in the 
“How to contact us?” section 


8. Can | withdraw my consent? 

Under certain circumstances and in accordance with applicable 
data protection legislation, you may withdraw your consent to the 
collection, use and disclosure of your personal information. 
However, such refusal or withdrawal of your consent may limit or 
prevent us from providing you with, or being able to continue to 
provide you with, specific products or services. Also, you may 
withdraw your consent to receive any marketing messages from 
Collabria and its affiliates by using our unsubscribe mechanism in. 
each marketing email we send, or by contacting us. Should you i 
wish to withdraw your consent to receive marketing or any oe 
promotional messages from the financial institution who referred you 
to us get a Collabria credit card, as well as affiliates, partners and ee 
assignees, you may do so by contacting said financial institution, ; 
affiliates, partners and assignees. 


9. How to contact us? 

For any questions or comments about this policy or personal 
information, to make an access or correction request, to makea 
complaint or to obtain information about our policies and practices i 
with respect to any service providers outside Canada, please | 
contact: privacy@collabriafinancial.com. 
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COLLABRIA PRIVACY POLICY SUMMARY 


bay btecton of your personal information is important for 
aK: la. This document summarizes our practices in order to 
in you understand how we collect, use and disclose personal 
Ormation. At any time, you can consult our complete privacy 
= available on our website at www.collabriafinancial.ca, or ask 
OF a Copy to be delivered to you by sending a request to the 
following address Privacy@collabriafinancial.com or Collabria, 
Suite 450, 110-9th Ave SW Calgary, Alberta T2P 071 or calling 
1.855.341.4643 (Canada and U S.) or 1.647.252.9564 
(International Collect). Use of your Card means that you have read 
Understood and that you agree with this summary and with 
Collabria’s privacy policy. 


1. Why do we collect information? 


Collabria collects and updates information, including personal 
information, in order to: 


* open a file under your name so that you may receive financial 
Services as they relate to the various credit and payment 
services offered by Collabria; 


* communicate with you and manage your customer file; 


* analyze your profile (to, among other purposes, better 
understand your spending patterns) and personalize our 
services, offers, promotions, contests and that of our affiliates 
and partners including bonus points offers, promotional 
interest rates for balance transfers from another competitor 
credit card, draws or contests for trips or merchandise; 


* complete your credit card application request; establish and 
serve you as customer; determine credit-worthiness; 
administer your account, update and review your financial 
commitments to Collabria; 


* perform services through third parties, including: determine 
credit-worthiness; perform collection activity, card 
management and distribution, authorization processing, 
statement processing, fraud detection and prevention, 
cardholder insurance benefits and rewards processing; 
comply with our legal and regulatory obligations including 
anti-money laundering or tax evasion and provide you with the 
services that you have asked for; 


meet tax or legal regulatory obligations; 


conduct analysis as portfolio analysis and reporting including 
io develop statistical models to predict individual default risk, 
prioritize collection actions and manage credit limits; 


reconcile account information and perform financial analysis 
(with information such as your account number, purchase 


volume, and outstanding balance), 


* protect you and Collabria from error and criminal activity, including the 
prevention, detection and investigation of fraud, money laundering, 
cyber threats and other such risks and threats; 

¢ allow the financial institution who referred you to us to get a 
Collabria credit card, as well as affiliates, partners and assignees to 
analyze your profile and personalize their services, offers, 
promotions, contests to you, in accordance to the privacy policy of 
said financial institution; 

* determine the category of eligible purchases and grant rewards in 
accordance with the Rewards Program terms and conditions 
applicable, if any; 

In any case, Collabria will only collect information that is necessary 
to achieve these purposes 


2. From whom do we collect information? 

In most circumstances, we collect information directly from you 
However, for all activities related to the determination and the 
maintaining of your credit-worthiness, Collabria will also, with your 
consent, collect information directly from credit reporting agencies, 
financial institutions, employers, credit card issuers, third party 
service providers, program partners, organizations or government 
bodies (collectively the “Third Parties”) 


3. What information do we collect? 

* your complete name, address, birth date, telephone 
number(s), email address, gender, professional occupation, 
income,education, assets, debts, social insurance number 
(optional information), marital status, monthly housing 
payment; residence status, length of time at the residence; 
immigration or citizenship status, mother's maiden name; 
identification document(including Canadian Citizenship card or 
certificate of Indian status or driver's license or provincial/ 
territorial ID card or passport or permanent residence card), 
length of employment, 


* your account information and transaction information 
including: account number, purchase volume, outstanding 
balance, some purchases with the name of the merchants and 
the amount; 


* information from Third Parties to assess and update your 
credit worthiness, including: credit score, credit reporting 
agencies reports, information on your income, professional 
occupation, your assets, your debts, 


* your telephone conversations, emails and short messages 
system (SMS) with our employees or representatives when 
you make requests for help or services or when we contact 
you for quality purposes or to manage your customer file. We 
may also collect these exchanges with you as proof of your 
consent, as required. 


4. With whom do we share personal information? 


We disclose personal information to and receive personal 
information from Third Parties required for the purposes of 
providing you with our services. Please refer to our privacy Po 
for more details. Here is a partial list of the main above- 
mentioned Third Parties 


licy 


a 


Visa Inc. or Mastercard International Incorporated; 
Equifax Inc. or Transunion of Canada Inc. ; 


The financial institution who referred you to us to get a 
Collabria credit card, as well as its affiliates, partners 
and assignees, 

* Nice Ltd 

 Spinutech Inc.; 

« CU Direct Corporation; 

« CU Cooperative Systems Inc.; 

+ Thales, 

¢ Fiserv; 

+ If applicable, CUMIS; 

« Fédération des Caisses Desjardins du Québec; 


« If applicable, with collection agencies including Solutions 
UpLevel, General Credit Services Inc., ARO Inc., 


« RR Donnelley & Sons Company (RRD), 
© Celero Solutions Inc.; 

* CBN Commercial Solutions; 

¢ Doxim Inc.; 

« RAZR Marketing Inc.; 

¢ Millennium Process Group Inc. 


* Service Quality Measurement (SQM) Group (Socia- 
demographic information). 
Please note that we share personal information with Third Parties 
located outside of Canada. In such a case, your personal 
information may be subject to the laws of the jurisdiction(s) in 
which the information is held. For example, information may be 
disclosed in response to valid demands or requests from 
government authorities, courts or law enforcement agencies in 
these jurisdictions. We have contractual agreements with these 
Third Parties in order to ensure that they provide effective 
protection for your personal information and that they will not 
use or share your information for purposes other than those for 
which we have shared your information 


5. What can your financial institution do with your 
personal information? 


The financial institution who referred you to us get a Collabria 
credit card, as well as its affiliates, partners and assignees may | 


ES 


Use your personal information lo: 

© assist us in the execution of the activities set out in the section 
1 above; and 

* any other purpose that you consented to directly with your 
financial institution. Please consult your financial institution's 


Privacy policy for more details. 


